GO LEARNING PATH · 4 LESSONS
Around Go: service security
Authentication and authorization, cryptographic purposes, controlled egress and TLS peer identity.
Authentication and authorization: a verified token is only the beginning
Validate identity separately from permission to act on a particular resource.
3 min · Worked lesson
Passwords, MACs and randomness solve different problems
Choose purpose-specific primitives and bound their cost instead of inventing cryptography.
3 min · Worked lesson
SSRF: let user input choose data, not an arbitrary network destination
Keep outbound destinations controlled and validate redirects and connection-time policy.
3 min · Worked lesson
TLS: verify the peer instead of disabling the error
Keep certificate-chain and hostname verification while making trust and rotation explicit.
3 min · Worked lesson